Anti-Virus 2011

Anti-Virus 2011 (also known as AntiVirus 2011) is not a legitimate anti-spyware as you may think. AntiVirus 2011 is a rogue anti-spyware which is designed to fool you, trustful PC users, into taking it serious and then steal your money. Haling from a new generation of spywares, program offers for victims to use some basic its functions and then announces numerous infections detected after running a full system scan. Further, Anti-Virus 2011 will keep telling that its unregistered version can’t remove these threats from your computer and will ask purchasing “licensed” its version for fixing everything. That’s how Anti-virus 2011’s brainwashing campaign ends. Don’t feel comfortable after noticing any of its traces because only Anti-Virus 2011 is the virus which must be removed for good.

While Internet Antivirus 2011 is running, it will display a variety of fake security warnings and alerts. Some of the alerts are:

System alert

Internet Antivirus 2011 has detected potentially harmful software in your system. It is strongly recommended that you register Internet Antivirus 2011 to remove all found threats immediately.

System warning

No real-time malware, spyware and virus protection was found. Click here to activate.

Warning! Identity theft attempt detected

Hidden connection IP: 128.154.26.11

Target: Microsoft Corporation keys

Warning

Warning! Virus detected

Manual Removal Steps

Note: If you are not proficient with computer, it’s highly recommended that you backup your registry before manually removing Internet Antivirus 2011 Rogue Anti-Spyware. Also double check the entries that you are going to delete.

Step 1: Processes you need to end:

 energy.exe

 exec.exe

 Internet Antivirus 2011.exe

 [random].exe

 CLSV.exe

Step 2: Registry entries you need to delete:

HKEY_CURRENT_USER\Software\3

HKEY_CLASSES_ROOT\MSSSys.DocHostUIHandler

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Internet Antivirus 2011”

Step 3: DLL Files you need to unregister:

kernel32.dll

ANTIGEN.dll

Step 4: Files you need to delete:

%Documents and Settings%\All Users\Application Data\[random_symbols]\

%Documents and Settings%\All Users\Application Data\[random_symbols]\[random].mof

%Documents and Settings%\All Users\Application Data\[random_symbols]\Internet Antivirus 2011.exe

%Documents and Settings%\All Users\Application Data\[random_symbols]\[random].exe

%Documents and Settings%\All Users\Application Data\[random_symbols]\Quarantine Items

%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Antivirus 2011.lnk

%Documents and Settings%\[UserName]\Application Data\Internet Antivirus 2011\

%Documents and Settings%\[UserName]\Application Data\Internet Antivirus 2011\Instructions.ini

%Documents and Settings%\[UserName]\Desktop\Internet Antivirus 2011.lnk

%Documents and Settings%\Recent\ANTIGEN.dll

%Documents and Settings%\Recent\ANTIGEN.drv

%Documents and Settings%\Recent\cid.tmp

%Documents and Settings%\Recent\CLSV.exe

%Documents and Settings%\Recent\CLSV.sys

%Documents and Settings%\Recent\DBOLE.drv

%Documents and Settings%\Recent\delfile.sys

%Documents and Settings%\Recent\eb.sys

%Documents and Settings%\Recent\energy.exe

%Documents and Settings%\Recent\exec.exe

%Documents and Settings%\Recent\fan.drv

%Documents and Settings%\Recent\kernel32.dll

%Documents and Settings%\Recent\pal.exe

%Documents and Settings%\Recent\PE.dll

%Documents and Settings%\Recent\ppal.drv

%Documents and Settings%\Recent\tempdoc.tmp

%Documents and Settings%\[UserName]\StartMenu\Internet Antivirus 2011.lnk

%Documents and Settings%\[UserName]\StartMenu\Programs\Internet Antivirus 2011.lnk.

Automatic Removal of Anti-Virus 2011

Please, be aware that manual removal of Internet Antivirus 2011 Rogue Anti-Spyware is a cumbersome task and can not always ensure complete removal of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards.Moreover, lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. That’s why it’s strongly recommended automatic removal of Internet Antivirus 2011 Rogue Anti-Spyware, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.

Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish. MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version. As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu.

Posted in: Anti-Virus 2011,PC Support,Technical Support,TechSupp 247,Virus Removal Support